Timelock duration on upgrades

Hyperliquid's assessment for RD-F-032 — scored red on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

No timelock on Bridge2 proxy admin upgrades. Foundation multisig can replace Bridge2 implementation immediately after signature collection — zero delay. The disputePeriodSeconds (~200 seconds for validator-set updates) is a challenge window for withdrawals only, NOT an upgrade timelock. Data cache confirms timelock_address: null.

Sources #

URL
HYPERLIQUID Critical Infrastructure Risk Assessment February 2026mefai Feb 2026 risk assessmentretrieved 2026-04-28

Methodology #

Read the timelock delay (in hours) between a queued upgrade proposal and its executable state.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol hyperliquid factor RD-F-032 score red collected_at 2026-04-28 13:58:49